Microsoft Entra: Upcoming changes to federatedTokenValidationPolicy default settings
The federatedTokenValidationPolicy is a resource type in Microsoft Graph (beta) that governs the validation of federated authentication tokens and allows customers to configure a rule to block logins where internalDomainFederation does not match UPN domain. The feature by default requires manual configuration in the tenant to prohibit cross-domain logins. To strengthen security with cross-domain sign-in we will change the default rule for federatedTokenValidationPolicy to block logins where internalDomainFederation does not match UPN domain. This internalDomainFederation object is typically created automatically during federation setup with AD federation server or other IdPs. Product Release phase General Availability Release date August CY2026 Platform Web Cloud Instance Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD Created 2026-07-01 23:03:18Z Roadmap ID 566869 Roadmap Link https://www.microsoft.com/microsoft-365/roadmap?id=566869
The post Microsoft Entra: Upcoming changes to federatedTokenValidationPolicy default settings appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Entra: Upcoming changes to federatedTokenValidationPolicy default settings
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Teams: Hide organizer names in calendar view on Teams Panels
Microsoft Teams Panels will add an admin setting to show or hide organizer names in Calendar View, configurable via the Teams Rooms Pro Manage...
Microsoft Defender for Office 365: New email submissions data in Advanced Hunting
Microsoft Defender for Office 365 will add two new Advanced Hunting tables, SubmissionEvents and SubmissionResults, providing security teams e...
Microsoft Copilot: Introducing the Microsoft plugin registry for Microsoft Copilot experiences
Microsoft is introducing a Microsoft plugin registry for Copilot experiences and Microsoft 365 apps, centralizing discovery, publishing, and g...
Action Required: Upgrade ExchangeOnlineManagement PowerShell Module to Version 3.10.1 or Later
Upgrade the ExchangeOnlineManagement PowerShell module to version 3.10.1 or later by March 31, 2027, to avoid authentication failures due to n...
Microsoft PowerPoint: Brand Guidelines and Style removed from new Brand Kit creation
Microsoft PowerPoint no longer includes Brand Guidelines and Style when creating new Brand Kits to simplify the process. Existing Brand Kits r...
Updates available for Microsoft 365 Apps for Current Channel
We’ve released updates to the following update channel for Microsoft 365 Apps: Current Channel When this will happen: We’ll be gra...
Windows settings backup is now enabled by default for eligible devices
With the release of Windows 11, version 26H2, the Windows settings backup policy is now enabled by default for eligible devices (see the Impac...
Dynamics 365 and Power Platform– Information about storage validation for Dataverse-only tenants
Beginning November 9, 2026, we are introducing staged storage validation for supported Dynamics 365 applications. The change gives administrat...
Business Skills in Work IQ – Default On
We are announcing the ability to use Business Applications in Work IQ to search and query Dataverse business data, Semantic Modeling, Business...
Dynamics 365 Contact Center – Let representatives set next presence to handle routing of work items
We are announcing the ability to let customer service representatives set their next presence to handle routing of work items in Dynamics 365 ...